Vendor

    Elementor

    71 known vulnerabilities in products by Elementor, 0 of them actively exploited (CISA KEV).

    Key figures

    71

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Elementor
    HighCVE-2022-1329

    Elementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code Execution

    also in 1 other product

    		8.8
    HighCVE-2023-3124

    Elementor Pro <= 3.11.6 - Authenticated (Subscriber+) Privilege Escalation via update_page_option

    also in 1 other product

    		8.8
    CriticalCVE-2020-13126

    Elementor Website Builder Pro: Remote Code Execution

    		9.9
    CriticalCVE-2023-48777

    WordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability

    		9.9
    CriticalCVE-2026-32475

    WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability

    		9.0
    HighCVE-2023-0329

    Elementor Website Builder < 3.12.2 - Admin+ SQLi

    		7.2
    HighCVE-2020-26596

    Elementor Pro: Code Execution

    		8.8
    MediumCVE-2023-47505

    WordPress Elementor Website Builder Plugin <= 3.16.4 is vulnerable to Cross Site Scripting (XSS)

    		6.5
    CriticalCVE-2020-7055

    Elementor Website Builder Pro: Unrestricted File Upload

    		9.9
    MediumCVE-2021-24891

    Elementor < 3.4.8 - DOM Cross-Site-Scripting

    		6.1
    MediumCVE-2022-29455

    Elementor Website Builder (WordPress plugin): Cross-site Scripting

    		4.7
    MediumCVE-2022-4953

    Elementor < 3.5.5 - Iframe Injection

    		6.1
    CriticalCVE-2020-7109

    Elementor Website Builder – more than just a page builder: security vulnerability

    		9.8
    HighCVE-2017-18596

    Elementor Website Builder Pro: Improper Access Control

    		8.8
    CriticalCVE-2023-47504

    Elementor Website Builder: Improper Authentication

    		6.5
    HighCVE-2026-62062

    Elementor Website Builder: Cross-Site Request Forgery (CSRF)

    		8.8
    HighCVE-2024-24934

    Elementor Website Builder: Path Traversal

    		8.5
    MediumCVE-2018-18379

    Elementor Website Builder Pro: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2020-8426

    Elementor Website Builder – more than just a page builder: Cross-Site Scripting (XSS)

    		5.4
    HighCVE-2026-109883

    WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2026-109884

    WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2020-20634

    Elementor Website Builder – more than just a page builder: security vulnerability

    		6.5
    MediumCVE-2026-120850

    WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability

    		6.5
    HighCVE-2026-84759

    WordPress Activity Log plugin <= 2.13.1 - Cross Site Request Forgery (CSRF) vulnerability

    		7.1
    MediumCVE-2026-57619

    WordPress Elementor Website Builder plugin <= 4.1.3 - Sensitive Data Exposure vulnerability

    		6.5

    All vulnerabilities in search

    News

    Products

    Products by Elementor
    Elementor Website Builder370
    Elementor Website Builder140
    Elementor Pro110
    Elementor Website Builder Pro80